v1.5.0

What's Changed

• fix(apt): decouple apt publish into its own re-runnable workflow by @malickyeu in #53
• feat(tls): built-in self-signed cert generator (--make-certs) by @malickyeu in #54
• feat(alerts): import/export alert rules as a portable JSON bundle by @malickyeu in #55
• fix(tlscert): make O_NOFOLLOW Windows-safe (unbreak cross-compile) by @malickyeu in #56
• feat(update): one-tap in-app update & restart for admins by @malickyeu in #57
• feat(editor): schema-aware autocomplete for Compose files by @malickyeu in #58
• feat(ldap): map LDAP groups to RBAC sections by @malickyeu in #59
• feat(registry): list private-registry tags in autocomplete by @malickyeu in #60
• feat(projects): deploy managed projects to a remote host by @malickyeu in #61
• feat(images): image vulnerability scanning via Trivy by @malickyeu in #62
• refactor(ui): unify tab bars into a shared Tabs component by @malickyeu in #63
• docs(release): cut 1.5.0 by @malickyeu in #64
• feat(security): encrypt host TLS private keys at rest by @malickyeu in #65

Full Changelog: v1.4.4...v1.5.0